Yubico Forum

I have "clients" changed to "val_clients".
I fount multiple yubikeys values​​. (But I do not see what is and what is not of the database)
If I change them all I get:

and if I use a used otp I get:

So that detects correctly

if I change nothing of the yubikeys values I get.

You should change all places in ykval-synclib where it says yubikeys in quotes. The error about curl_multi_init means you don't have the php curl module installed.
It's not really needed when you just have one server and noone to sync with, but the code doesn't know about that.

/klas

I checked my php configuration and I saw the curl module was installed but was turned off.
This I finally turned and he works.

had 1 single thing to change in the config to:
$baseParams['__YKVAL_SYNC_POOL__'] = array();
was first
$baseParams['__YKVAL_SYNC_POOL__'] = array("");
there was a quote I forgot to remove.

and finally it works and I'm glad that it works.

Thank you very much for your help!

Things are nearly working: the ksm returns something that looks good, and the verify runs, but comlains "NOT_ENOUGH_ANSWERS" and /var/log/messages says:

Jan 29 17:36:05 ydb ykval[22607]: LOG_INFO:ykval-queue:synclib:server=http://ydb.peak.org/wsapi/2.0/sync, server_nonce=965f1784df8cb5f769022216560687ca, info=yk_publicname=vvhbtfcndfgv&yk_counter=1&yk_use=13&yk_high=100&yk_low=28704&nonce=b7328dd9e35ba9d49e6245eb500add0a,local_counter=1&local_use=12
Jan 29 17:36:05 ydb ykval[22607]: LOG_ERR:ykval-queue:synclib:Remote server refused our sync request. Check remote server logs.

ksm and validation are both on the same server and there aren't any obvious "remote server logs" to check...ykval-queue.log just says:

[Jan 29 17:35:25] notice: starting ykval-queue daemon, output in: /var/log/ykval-queue.log

Almost there.. =)

If you've only got one validation server you want to make sure the config parameter __YKVAL_SYNC_POOL__ is empty and that __YKVAL_SYNC_DEFAULT_LEVEL__ is 0.
What's happening is that your validation server tries to sync with another server and fails. As default sync level is measure in percent it doesn't get up to required level of syncronization and sends an error to the user.

/klas

Do I even need to run ykval-queue?

That did it, thanks! And it doesn't appear that ykval-queue is needed...

No, ykval-queue is only needed if you have several validation servers to keep in sync.

/klas